Tag: CVE-2026-109618
PHP2Shell + Fragnesia: Patched Linux Servers That Are Still Vulnerable to Root (CVE-2026-46300)
Attackers chain PHP2Shell (into your website) with Fragnesia (a Linux kernel bug) to get root. The kernel fix came out in May, yet servers still get hit, because the fix is installed but never running.
Read more →PHP2Shell Explained: The Critical PHP Flaw Behind Emergency Patches (and How to Check You Are Safe)
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) lets attackers run code on any server running PHP, with no login needed. What it is, why php -v can mislead you, and how to check and patch your server.
Read more →